They are talking about programming practices they refer to as "industry standards" they will claim when used reduce release of vulnerable code.

How to solve infra-structure issues or how to work out the security issues of authentication and authorization is something learned in college.

Having said that, I agree with your advice not to bother with these guys [unless you need stuffing for your resumé].

Sounds like they are trying to carve a market for themselves; maybe the sponsors of this group will give preference to programmers who go through the program.